Latest Drupal RCE Flaw Used by Cryptocurrency Miners and Other Attackers

Another remote code execution vulnerability has been revealed in Drupal, the popular open-source Web content management system. One exploit — still working at time of this writing — has been used in dozens of unsuccessful attacks against our customers, with an unknown number of attacks, some like...

Torrent uploader CracksNow caught distributing GrandCrab ransomware

By Waqas Famous Uploader CracksNow Banned from Torrents for Distributing GrandCrab Ransomware. CracksNow is a prominent software uploader who appears regularly on torrent sites. However, recently the account of CracksNow was banned by several torrent sites while the uploader is accused of...

CVE-2018-14979

The ASUS ZenFone 3 Max Android device with a build fingerprint of asus/USPhone/ASUSX0081:7.0/NRD90M/USPhone-14.14.1711.92-20171208:user/release-keys contains a pre-installed app with a package name of com.asus.loguploader versionCode=1570000275, versionName=7.0.0.55170515. This app contains an...

Miss Marple Enterprise Edition File Upload / Hardcoded AES Key Vulnerability

Exploit for windows platform in category local exploits ======================================================================= title: Multiple critical vulnerabilities product: Miss Marple Enterprise Edition vulnerable version: 2.0 fixed version: 2.0 CVE number: CVE-2018-19233, CVE-2018-19234...

BaserCMS Cross-Site Scripting Vulnerability (CNVD-2019-09273)

BaserCMS is an enterprise cms. 4.1.4 A cross-site scripting vulnerability exists in the category name of the "Register New Category" feature in the "Upload" menu of BaserCMS before 4.1.4, which can be exploited via the dataUploaderCategoryname parameter of the admin/uploader/uploadercategories/ed...

CVE-2018-18943

An issue was discovered in baserCMS before 4.1.4. In the Register New Category feature of the Upload menu, the category name can be used for XSS via the dataUploaderCategoryname parameter to an admin/uploader/uploadercategories/edit URI...

CVE-2018-18943

An issue was discovered in baserCMS before 4.1.4. In the Register New Category feature of the Upload menu, the category name can be used for XSS via the dataUploaderCategoryname parameter to an admin/uploader/uploadercategories/edit URI...

Cross-Site Scripting (XSS)

camaleoncms is vulnerable to cross-site scripting. Files uploaded via the media uploader are not validated. This allows a remote attacker to inject arbitrary Javascript into a victim's browser via the filename parameter...

Apache Portals Pluto 3.0.0 - Remote Code Execution Exploit

Exploit for windows platform in category web applications Exploit Title: Apache Portals Pluto 3.0.0 - Remote Code Execution Exploit Author: Che-Chun Kuo Vendor Homepage: https://portals.apache.org/pluto/ Software Link: http://archive.apache.org/dist/portals/pluto/ Version: 3.0.0 Tested on: Window...

Wordpress Simple 301 Redirects Addon Bulk CSV Uploader Plugin Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the Wordpress Simple 301 Redirects Addon Bulk CSV Uploader plugin, which can b...

Security Bulletin: Multiple cross-site scripting (XSS) vulnerabilities in IBM Dojo Toolkit affects IBM Case Manager (CVE-2014-8917)

Summary There are multiple cross-site scripting XSS vulnerabilities in 1 uploader.swf, 2 fileuploader.swf, 3 audio.swf, and 4 video.swf in the IBM Dojo Toolkit. Vulnerability Details CVE-ID: CVE-2014-8917 Description: There are multiple cross-site scripting XSS vulnerabilities in the following IB...

MySQL Blob Uploader 'home-filet-edit.php' SQL Injection Vulnerability

MySQL Blob Uploader is a database file upload script. MySQL Blob Uploader 'home-filet-edit.php' suffers from a SQL injection vulnerability that can be exploited by an attacker to execute arbitrary SQL commands...

MySQL Blob Uploader 1.7 Cross Site Scripting / SQL Injection Vulnerabilities

MySQL Blob Uploader version 1.7 suffers from cross site scripting and remote SQL injection vulnerabilities. ------------------------- Exploit 1 of 4: Exploit Title: MySQL Blob Uploader 1.7 - 'download.php' SQL Injection / Cross-Site Scripting Dork: N/A Date: 22.05.2018 Exploit Author: Azkan Musta...

Easy File Uploader 1.7 Shell Upload

==================================================================================================================================== | Title : Easy File Uploader 1.7 unrestricted file upload Vulnerability | | Author : indoushka | | Telegram : @indoushka | | Tested on : windows 10 FranASSais V.Pro...

MySQL Blob Uploader 1.7 - download.php SQL Injection Cross-Site Scripting

MySQL Blob Uploader 1.7 - download.php SQL Injection Cross-Site Scripting Exploit Title: MySQL Blob Uploader 1.7 - 'download.php' SQL Injection / Cross-Site Scripting Dork: N/A Date: 22.05.2018 Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor Homepage:...

MySQL Blob Uploader 1.7 - home-filet-edit.php SQL Injection Cross-Site Scripting

MySQL Blob Uploader 1.7 - home-filet-edit.php SQL Injection Cross-Site Scripting Exploit Title: MySQL Blob Uploader 1.7 - 'home-filet-edit.php' SQL Injection / Cross-Site Scripting Dork: N/A Date: 22.05.2018 Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor Homepage:...

MySQL Blob Uploader 1.7 Cross Site Scripting / SQL Injection

------------------------- Exploit 1 of 4: Exploit Title: MySQL Blob Uploader 1.7 - 'download.php' SQL Injection / Cross-Site Scripting Dork: N/A Date: 22.05.2018 Exploit Author: Azkan Mustafa AkkuA AkkuS Vendor Homepage:...

MySQL Blob Uploader 1.7 - home-file-edit.php SQL Injection Cross-Site Scripting

MySQL Blob Uploader 1.7 - home-file-edit.php SQL Injection Cross-Site Scripting Exploit Title: MySQL Blob Uploader 1.7 - 'home-file-edit.php' SQL Injection / Cross-Site Scripting Dork: N/A Date: 22.05.2018 Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor Homepage:...

MySQL Blob Uploader 1.7 - home-filet-edit.php SQL Injection

MySQL Blob Uploader 1.7 - home-filet-edit.php SQL Injection Exploit Title: MySQL Blob Uploader 1.7 - 'home-filet-edit.php' SQL Injection Dork: N/A Date: 2018-05-22 Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor Homepage:...

Easy File Uploader 1.7 - SQL Injection / Cross-Site Scripting Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Easy File Uploader 1.7 - SQL Injection / Cross-Site Scripting Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor Homepage: https://codecanyon.net/item/easy-file-uploader-php-multiple-uploader-with-file-manager/17222287 Version: 1....